Npm on Michele Bolognahttps://www.michelebologna.net/tags/npm/Recent content in Npm on Michele BolognaHugoenThu, 12 Nov 2026 00:00:00 +0000Wait a week before you update: most poisoned releases are gone by thenhttps://www.michelebologna.net/2026/wait-a-week-before-you-update/Fri, 09 Oct 2026 00:00:00 +0000https://www.michelebologna.net/2026/wait-a-week-before-you-update/Do you install updates the day they ship? In September 2025 that got you malicious chalk and debug, live on npm for about two hours. My updates now wait a week, two for a minor release, unless they fix a vulnerability I actually run.